CVE-2026-74959

Summary

Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefox140.14 <= 140.*unaffected
MozillaFirefox153.1 <= 153.*unaffected
MozillaFirefox154 <= *unaffected
MozillaThunderbird140.14 <= 140.*unaffected
MozillaThunderbird153.1 <= 153.*unaffected
MozillaThunderbird154 <= *unaffected

Weaknesses

References